yershop open source online store system code execution vulnerabilities exist in the background

yershop open source online store system is a thinkphp5-based mall system with a key to generate controllers , models , validators , templates , general additions and deletions , and other functions. yershop open source online store system code execution vulnerabilities exist in the background , a...

CVE-2019-9607

PHP Scripts Mall Medical Store Script 3.0.3 allows Path Traversal by navigating to the parent directory of a jpg or png file...

CVE-2019-9607

PHP Scripts Mall Medical Store Script 3.0.3 allows Path Traversal by navigating to the parent directory of a jpg or png file...

Design/Logic Flaw

PHP Scripts Mall Personal Video Collection Script 4.0.4 has Stored XSS via the "Update profile" feature...

Path traversal

PHP Scripts Mall Medical Store Script 3.0.3 allows Path Traversal by navigating to the parent directory of a jpg or png file...

CVE-2019-9606

PHP Scripts Mall Personal Video Collection Script 4.0.4 has Stored XSS via the "Update profile" feature...

CVE-2019-9606

PHP Scripts Mall Personal Video Collection Script 4.0.4 has Stored XSS via the "Update profile" feature...

CVE-2019-9607

PHP Scripts Mall Medical Store Script 3.0.3 allows Path Traversal by navigating to the parent directory of a jpg or png file...

CVE-2019-9606

CVE-2019-9606 affects PHP Scripts Mall Personal Video Collection Script 4.0.4. The vulnerability is a Stored XSS in the Update profile feature. The available sources describe the affected product and the type of issue but do not provide detailed root cause analysis, exploit patterns, affected ver...

CVE-2019-9607

CVE-2019-9607 affects PHP Scripts Mall Medical Store Script 3.0.3 and enables Path Traversal by navigating to the parent directory of a JPG or PNG file. The NVD describes this as a Medium severity issue (CVSS v2 base 5.0; CVSS v3 base 5.3) with network access, low attack complexity, no authentica...

PHP Scripts Mall Auction website script input validation vulnerability

PHP Scripts Mall Auction website script is an online auction website system by PHP Scripts Mall India. An input validation vulnerability exists in PHP Scripts Mall Auction website script version 2.0.4, which can be exploited by an attacker to modify the amount of payment...

PHP Scripts Mall Custom T-Shirt Ecommerce Script Input Validation Vulnerability

PHP Scripts Mall Custom T-Shirt Ecommerce Script is a website system for customizing t-shirts online by PHP Scripts Mall India. An input validation vulnerability exists in PHP Scripts Mall Custom T-Shirt Ecommerce Script version 3.1.1, which can be exploited by an attacker to change the amount of...

CVE-2019-9064

PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory Traversal into the parent directory of a jpg or png file...

CVE-2019-9065

PHP Scripts Mall Custom T-Shirt Ecommerce Script 3.1.1 allows parameter tampering of the payment amount...

Code injection

PHP Scripts Mall Auction website script 2.0.4 allows parameter tampering of the payment amount...

Directory traversal

PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory Traversal into the parent directory of a jpg or png file...

CVE-2019-9063

PHP Scripts Mall Auction website script 2.0.4 allows parameter tampering of the payment amount...

Cross site request forgery (csrf)

PHP Scripts Mall Online Food Ordering Script 1.0 has Cross-Site Request Forgery CSRF in my-account.php...

CVE-2019-9065

PHP Scripts Mall Custom T-Shirt Ecommerce Script 3.1.1 allows parameter tampering of the payment amount...

CVE-2019-9063

The CVE-2019-9063 entry concerns PHP Scripts Mall Auction website script version 2.0.4, where an input validation vulnerability allows parameter tampering of the payment amount. Connected CNVD/NVD records describe an input validation flaw enabling modification of the donation/paid amount; exploit...